I am currently having an issue with a bot that is creating 100's of accounts. It seems like there may be an issue with my Captcha, as it's not appearing (to me at least) on the create account page:

https://www.celiac.com/register/ 

Currently I'm blocking IP's and adding more complex Question & Answer Challenges, which does appear to be working on my register page.

Does anyone else have this issue, or have dealt with it in the past? 

The bot seems to be spoofing or quickly changing IP's, so using the IP block is like playing whack a mole...one I block a range they appear from another range.

Would first recommend checking your CAPTCHA is enabled, as there are no errors on the page or even the section headline for it. If CAPTCHA is enabled is, then you would need to test on an unmodified theme and disable all third-party applications/plugins.

 

Switch to hcaptcha with the highest level of difficulty.  

Install cleantalk 

Many of us were hit with this wave of spam.